*Urgent* TCP out of order.

Hi team,

My customer is facing the TCP out of order in pcaps while accessing SMB application. 

He implemented the Zone protection in LAN zone which has Asymmetric path set as global, I changed it to bypass...

Will this resolve the issue...?? why TCP o

Regarding URL Filtering

Hello Everyone,

I am little confused in creating URL filtering policy rule. Does allowing certain url category in the policy block everything else?

For example in a policy from inside to outside i created and allowed url category online storage and b

Unable to extract the table from the task result from es-search quarry.

I have created one playbook for IOC hunting but after querying the IOC in the elastic search, it create one nice table under Hits: in the war room but this variable is not appear on the output result of the es-search module, so i cannot extract the s

PCNSE now Cover PANOS 10

Pearson VUE - endless frustration with the most horrible company on Earth!!

I sat multiple exams from multiple vendors during the last 2 months and one of them was Palo Alto. All of the exams were the so called "online proctored exams" which are served by the super ridiculous OnVUE platform written by script kiddies during a

Reliability of "name-of-threatid" in threat log searches

When using the "name-of-threatid" to search threat logs I am getting very inconsistent results.

Some signatures are returning properly, while others return blank results - even when I build the search syntax dynamically by clicking on the alerts in t

wildfire submission issue

There are certain files which were sent to wildfire for multiple times and every time we have received verdict as malicious.
The same file (i have verified the file hash available in wildfire cloud) is submitting multiple times even after the verdict

Invalid portal error in GlobalProtect

have the GP 4.1 client installed on a computer with Windows 10 Enterprise v2004 64bit, which when wanting to connect to the company portal, marks me as invalid portal, everything related that I have found on the network has already been reviewed but

Need some guidance on the VM series implementation

Hi there,

I have inherited the current network and need some help in replacing the firewall for like to like. We have a MPLS network connecting all our offices and an external firewall managed by the ISP. Traffic from all sites go out via the external

ISP Failover With Controlled Failback

We have a pair of PA-3020 setup with HA and ISP Failover. PAN OS 9.1.3-h. I am not using PBF. I want to connect our VOIP phone switch to the firewall. Our VOIP phones connect to a cloud based PBX. I setup a new VR for VOIP with ports for ISP1, ISP2,

Azure Marketplace - VM-Series Next-Generation Firewall (CIS Benchmark)

Does anyone know if the VM-Series Next-Generation Firewall from Palo Alto Networks within the Azure Marketplace meets any of the CIS Level 1 or 2 Benchmarks? If deploying these FWs from the Marketplace, do we need to harden the images using the lates

Authentication Policy Use Case

Here use case and wondering if this is feasible.

1. User Bob is already authenticated and connected(tunnel VPN) to firewall A with GlobalProtect with his account "Bob".

2. User Bob need to access critical ressource behind the same firewall A with, how

Useability suggestion: Add Context sensitive Right Click Menu to PANOS UI.

I suggest PA should add context sensitive right click menus to the web UI in PanOS(Both Firewall and Panorama)

As an example, when a Security Policy rule is selected right click should popup a menu with actions that can be done on the item.
Like "Add